
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json)
Hash identifier: nTyp8M9yu/pg8EOg3EZuEcqKUlmYARnk19oiQS9x6/0=
Subject key identifier: F9:D1:6D:ED:29:AD:CA:CF:DA:13:24:B2:3E:07:43:B1:57:35:0D:42
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial: 05C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
Manifest number: 05B0
Signing time: Tue 12 May 2026 23:15:28 +0000
Manifest this update: Tue 12 May 2026 23:15:28 +0000
Manifest next update: Tue 19 May 2026 23:15:28 +0000
Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: YT33P6ENgK1FFHSld8MMD2no9/w5UWPiZ5IgiJPWZNM=)
2: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: u3QeAH/Xjc/phjAuXipIPbI5+ZQ8m+RjZgJwXpuM0m0=)
3: 2DA2253A4E1211F1BF860394CD833773.roa (hash: OQC3+KRN4hsjI0V7STttKspjEkoDxGfQu0IpJxAelaI=)
4: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: wMvkSHLjnq5sLqQ/zAmxIdC9rNEgP/i+2/CsALVDz+A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1473 (0x5c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Validity
Not Before: May 12 23:15:28 2026 GMT
Not After : May 19 23:15:28 2026 GMT
Subject: CN=6a03b490-b743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:b0:d9:f9:b3:1e:d2:d7:f3:80:74:39:2b:
68:b8:2f:3a:c1:3d:e9:d8:ef:ca:22:03:ac:f2:48:
86:e6:3f:07:9d:ec:a6:e7:bd:e1:47:db:ed:fd:d2:
e5:34:a8:fc:4d:8b:be:0e:33:9c:d2:15:33:5e:be:
d2:c3:bd:ce:46:cd:57:22:95:d1:26:d0:5c:b7:bc:
ea:4e:e0:d5:fa:79:36:b3:59:79:d9:97:31:3c:56:
fe:3a:a3:4e:be:e6:c7:c0:14:ae:de:b1:d9:36:35:
8c:a4:2e:0b:3f:22:68:a1:e4:55:5f:d3:cf:1a:e7:
0d:ec:42:ec:f9:d8:e9:10:3f:21:a8:4b:7c:7d:14:
56:4b:75:b1:d1:b1:6a:8e:1e:1e:bb:4d:2c:21:73:
c4:52:2c:00:2f:11:b4:50:51:7e:65:fd:bf:fa:6e:
a5:fb:04:71:2c:87:51:6b:f8:ce:88:d4:dd:8e:4b:
78:a0:c6:82:e8:e1:49:41:52:76:85:c7:61:69:51:
9c:aa:f4:c6:09:63:b5:2a:24:70:55:b7:34:43:fa:
0e:5c:79:3a:11:56:8b:a2:55:76:37:32:2d:ff:fb:
18:0c:db:b1:ef:11:65:e9:f8:77:83:db:1f:e4:e9:
88:91:bf:9c:07:56:d4:23:3d:f6:24:8d:4c:eb:3f:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D1:6D:ED:29:AD:CA:CF:DA:13:24:B2:3E:07:43:B1:57:35:0D:42
X509v3 Authority Key Identifier:
keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:d9:0b:02:c5:dc:31:cb:0b:e5:86:cf:b7:0e:dd:30:86:46:
6a:d8:ce:e9:7a:bf:ec:65:13:8e:fb:63:f1:03:22:91:b9:4b:
0b:3c:91:26:3f:61:c9:c2:b1:99:15:9a:d5:2b:ff:1f:b1:d0:
e1:93:86:3d:3f:6d:b6:b5:f7:d5:d5:aa:d2:57:62:a2:1a:3b:
c7:10:bc:41:9b:68:c5:19:17:9f:2c:fb:b5:72:2f:f1:5a:70:
15:17:65:49:41:5c:23:ee:54:b3:94:80:40:29:2b:92:d7:cb:
41:8d:ec:dd:9c:30:94:01:b7:8a:7a:27:31:1d:da:ea:dc:c7:
bc:51:aa:9c:fe:40:87:b9:33:07:d8:da:61:89:a4:4c:1e:fd:
b8:24:b1:b6:c5:71:de:52:93:30:14:df:bd:de:46:b5:2d:95:
ee:f7:90:80:18:c8:1c:c1:32:ea:a1:1e:ef:af:a3:91:be:f2:
8f:06:a4:be:fb:ec:2b:ab:ff:3e:2a:78:7a:54:44:5e:17:1a:
af:7b:e5:91:a2:a1:00:d4:22:c9:5f:cf:67:b8:bc:12:f2:23:
07:54:2a:f5:6f:2e:72:0a:e4:c7:9c:c9:1e:a5:cd:7c:74:63:
dc:80:c8:f8:48:9c:fb:91:68:5b:40:3b:08:b6:8d:ef:d5:54:
7c:4b:d5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:06:02 2026 by rpki-client